last executing test programs: 6m15.563162505s ago: executing program 1 (id=324): r0 = socket(0xa, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, &(0x7f0000000480)={[0x4]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000001}) close(r1) shutdown(r0, 0x0) 6m15.111892466s ago: executing program 1 (id=326): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000001) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 6m8.628359359s ago: executing program 1 (id=345): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800450000200000e000"], 0x0) 6m7.294942077s ago: executing program 1 (id=349): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 6m6.382765956s ago: executing program 1 (id=352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x9f0f, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x10000, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x45, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6m5.749679601s ago: executing program 1 (id=354): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000700)='./file1\x00', 0x2000775) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x6000081) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 6m3.746283063s ago: executing program 32 (id=354): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000700)='./file1\x00', 0x2000775) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x6000081) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 5m44.906377483s ago: executing program 4 (id=409): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x7}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x300, 0x0, 0x0, 0x0) 5m43.598588719s ago: executing program 4 (id=414): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xddc, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 5m34.645167201s ago: executing program 4 (id=434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x0) 5m31.978972495s ago: executing program 4 (id=440): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef1baf413b01000000e4d0ce5d7896ee5e5c3676000000000000000000004faa2ae2a784a0ea0e00000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0xe]}) fallocate(r0, 0x0, 0x0, 0x280404) 5m30.635118288s ago: executing program 4 (id=444): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000200)=[r2], &(0x7f0000000040)}) 5m29.140190906s ago: executing program 4 (id=447): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) 5m26.563379512s ago: executing program 33 (id=447): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) 10.815094573s ago: executing program 2 (id=1749): r0 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) 9.913356251s ago: executing program 2 (id=1755): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) 9.073220617s ago: executing program 2 (id=1759): syz_emit_ethernet(0x6e, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2e, 0x0, [{0x0, 0x5, "f34629"}, {0x0, 0x9, "3033a70f1c0f9d"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x400000013) 8.374636837s ago: executing program 2 (id=1762): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0xffffff51, 0x2, 0x10, 0x7, "568007069e0d5bc0f6c61030f6b94732c5639a", 0x9, 0x8}) ioctl$TCXONC(r1, 0x540a, 0x3) 7.652501065s ago: executing program 2 (id=1766): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000040)={'veth0_macvtap\x00', @ifru_settings={0xc, 0x7, @sync=&(0x7f0000000380)={0x3, 0x0, 0x9}}}}) 5.186734107s ago: executing program 6 (id=1779): r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)={r2, 0x2007, 0x20, 0x3}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 4.931803847s ago: executing program 5 (id=1780): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 4.460769199s ago: executing program 5 (id=1782): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3fe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/202, 0xca}], 0x1) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44010000090601"], 0x144}, 0x1, 0x0, 0x0, 0x40015}, 0x44080) 4.406935592s ago: executing program 0 (id=1783): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x19c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket$kcm(0x21, 0x4, 0xa) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x7) 4.388015342s ago: executing program 6 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x90, r1, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x4101, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080) 4.004126683s ago: executing program 3 (id=1785): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001200)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061"]}, @subvolid=0x8}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c002280340000800800030000000000080005000000000008000200000000000800030000000000080002000000000008000400000000004400008008000400000000000800070000000000080006000000000008000500000000000800010000000000080002"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 3.70709155s ago: executing program 6 (id=1786): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.629321139s ago: executing program 0 (id=1787): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) close(0x3) unshare(0x8040600) ppoll(&(0x7f0000000040)=[{r1, 0xa}], 0x1, 0x0, 0x0, 0x0) 3.619408351s ago: executing program 3 (id=1788): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0xfffc, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20008}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4048004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.448847364s ago: executing program 5 (id=1789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6d5a586", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmsg$nfc_llcp(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000a40)="c2e8dfeae892f99fe66ea44cc8fc8ff8", 0x10}], 0x1, 0x0, 0x0, 0xc0000d5}, 0x0) 2.947131592s ago: executing program 3 (id=1790): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) 2.946868173s ago: executing program 0 (id=1791): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D'], 0x44}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 2.747334566s ago: executing program 5 (id=1792): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x1, 0x451, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 2.31222921s ago: executing program 6 (id=1793): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 2.250244968s ago: executing program 0 (id=1794): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001a80)={'#! ', './file1/../file0', [{0x20, '\xeb)\'-!'}, {0x20, '-*.\x1f'}, {0x20, '!\\\\\'#'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/dev/loop#\x00'}, {0x20, '&/&'}]}, 0xa8) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "0002784148b29e7bcaf3e29c2593b929f38d08de9a57967d49c269445df5a02a484a4fff1f05bbd60b043247a4e72e4f0bedb7c930aa4ab1e46695c1fb6ce947a12539fd90c30a1de6c9c3f7d33fc18866cb"}, 0x66) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2.175946311s ago: executing program 3 (id=1795): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) syz_open_procfs(r1, &(0x7f00000005c0)='attr/prev\x00') 1.626895695s ago: executing program 6 (id=1796): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000040000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.472688076s ago: executing program 5 (id=1797): r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.228779003s ago: executing program 0 (id=1798): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 1.221741923s ago: executing program 3 (id=1799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 549.44802ms ago: executing program 3 (id=1800): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) syz_clone(0x2044100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 395.444376ms ago: executing program 0 (id=1801): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x400, 0x2, 0x5a}, &(0x7f0000000000)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xa) 320.322903ms ago: executing program 2 (id=1802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000240)="a43b2eaab40000", 0x7}, {&(0x7f0000000280)="75c95285", 0x4}], 0x4) 277.050121ms ago: executing program 6 (id=1803): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000a380)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c67f0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f7687b00891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c11b7ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x101405, 0x7, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x8000000000000000, {0x7, 0x2b, 0x9, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=1804): getpid() r0 = landlock_create_ruleset(&(0x7f0000000180)={0x6125, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) setregid(0xee00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) kernel console output (not intermixed with test programs): etected capacity change from 0 to 256 [ 408.694044][ T5843] usb 4-1: config 0 descriptor?? [ 409.025759][ T7823] loop6: detected capacity change from 0 to 1024 [ 409.240044][ T7823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 409.268734][ T5843] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 409.276142][ T5843] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 409.283185][ T5843] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 409.290608][ T5843] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 409.297780][ T5843] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 409.304833][ T5843] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 409.311984][ T5843] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 409.366059][ T7823] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.528863][ T5843] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 409.793024][ T5843] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 409.801358][ T5843] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 409.883089][ T5843] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71 [ 410.025096][ T5843] usb 4-1: USB disconnect, device number 14 [ 410.271745][ T7345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 411.217772][ T7847] netlink: 'syz.5.583': attribute type 3 has an invalid length. [ 411.306485][ T7847] netlink: 'syz.5.583': attribute type 3 has an invalid length. [ 411.542258][ T7844] fido_id[7844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 411.660880][ T7855] loop2: detected capacity change from 0 to 256 [ 411.670132][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 411.681809][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 411.816642][ T7855] FAT-fs (loop2): bogus logical sector size 128 [ 411.823152][ T7855] FAT-fs (loop2): Can't find a valid FAT filesystem [ 412.517846][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.5.589'. [ 412.644260][ T7863] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 412.766991][ T7863] gretap1: entered promiscuous mode [ 412.772562][ T7863] gretap1: entered allmulticast mode [ 413.929732][ T7882] netlink: 'syz.3.595': attribute type 39 has an invalid length. [ 415.376110][ T5948] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 415.621719][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.633494][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.643734][ T5948] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 415.653226][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.726961][ T7905] netlink: 'syz.6.602': attribute type 12 has an invalid length. [ 415.734882][ T7905] netlink: 'syz.6.602': attribute type 29 has an invalid length. [ 415.744492][ T7905] netlink: 148 bytes leftover after parsing attributes in process `syz.6.602'. [ 415.753769][ T7905] netlink: 'syz.6.602': attribute type 1 has an invalid length. [ 415.777533][ T7905] Zero length message leads to an empty skb [ 415.866129][ T5948] usb 3-1: config 0 descriptor?? [ 416.402566][ T5948] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 416.410639][ T5948] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 416.418566][ T5948] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 416.430522][ T5948] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 416.439395][ T5948] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 416.668946][ T5948] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 416.874258][ T5948] playstation 0003:054C:0DF2.0009: Invalid byte count transferred, expected 20 got 0 [ 416.884244][ T5948] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22 [ 416.894007][ T5948] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 416.904340][ T5948] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 417.094563][ T5948] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -22 [ 417.210793][ T5948] usb 3-1: USB disconnect, device number 7 [ 417.593712][ T7914] fido_id[7914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 418.718296][ T7937] capability: warning: `syz.0.612' uses 32-bit capabilities (legacy support in use) [ 418.802547][ T7937] netlink: 84 bytes leftover after parsing attributes in process `syz.0.612'. [ 419.146965][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.153756][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.596090][ T7946] loop2: detected capacity change from 0 to 128 [ 419.713046][ T7946] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 419.819811][ T7946] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 420.599788][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.370255][ T7985] loop3: detected capacity change from 0 to 512 [ 422.440019][ T7985] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.588107][ T7985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 422.742085][ T7985] EXT4-fs (loop3): 1 truncate cleaned up [ 422.827225][ T7985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.291931][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.470897][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 423.535682][ T5948] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 423.593233][ T8003] netlink: 'syz.0.633': attribute type 2 has an invalid length. [ 423.601390][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 423.739275][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.751761][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.761950][ T5948] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.775873][ T5948] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.785141][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.869995][ T5948] usb 6-1: config 0 descriptor?? [ 424.813890][ T5948] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 425.573067][ T8014] loop0: detected capacity change from 0 to 8192 [ 425.966128][ C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 426.095597][ T5948] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 426.804215][ T8037] loop6: detected capacity change from 0 to 256 [ 426.937552][ T10] usb 6-1: USB disconnect, device number 3 [ 426.953776][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 426.953848][ T30] audit: type=1800 audit(1770649281.924:66): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.643" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=1048630 res=0 errno=0 [ 427.371333][ T8039] loop5: detected capacity change from 0 to 128 [ 427.584669][ T8047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.647'. [ 427.594014][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 427.899802][ T8051] loop0: detected capacity change from 0 to 2048 [ 428.019578][ T8051] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 428.071572][ T8051] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 428.081217][ T8051] UDF-fs: Scanning with blocksize 512 failed [ 428.179444][ T8051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.365658][ T30] audit: type=1800 audit(1770649283.344:67): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.646" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 429.420219][ T8070] netlink: 'syz.6.655': attribute type 1 has an invalid length. [ 429.431507][ T8070] netlink: 'syz.6.655': attribute type 4 has an invalid length. [ 429.440632][ T8070] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.655'. [ 430.035827][ T8076] syz.6.658 uses obsolete (PF_INET,SOCK_PACKET) [ 434.041948][ T8134] loop3: detected capacity change from 0 to 4096 [ 434.150983][ T8134] EXT4-fs (loop3): Test dummy encryption mode enabled [ 434.285780][ T8134] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80ec018, mo2=0003] [ 434.354512][ T8134] System zones: 0-5 [ 434.429738][ T8134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.157132][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.191106][ T8159] loop2: detected capacity change from 0 to 128 [ 435.259166][ T8159] EXT4-fs: Ignoring removed nobh option [ 435.449737][ T8159] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.547538][ T8159] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 435.696456][ T8165] loop5: detected capacity change from 0 to 64 [ 436.348323][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 437.037793][ T8177] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.694'. [ 438.023659][ T8187] loop3: detected capacity change from 0 to 512 [ 438.125770][ T8187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 438.228808][ T8195] loop5: detected capacity change from 0 to 2048 [ 438.342958][ T8187] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.699: inode has both inline data and extents flags [ 438.457412][ T8187] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.699: couldn't read orphan inode 15 (err -117) [ 438.546303][ T8195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.600201][ T8187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.037916][ T5843] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 439.142217][ T8212] loop0: detected capacity change from 0 to 128 [ 439.279215][ T6984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.297401][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.354474][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.367637][ T5843] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.409306][ T5843] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.422057][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.431290][ T5843] usb 3-1: Product: syz [ 439.440988][ T5843] usb 3-1: Manufacturer: syz [ 439.447136][ T5843] usb 3-1: SerialNumber: syz [ 440.037764][ T8215] loop3: detected capacity change from 0 to 512 [ 440.101221][ T8215] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 440.365059][ T8215] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 440.454184][ T8215] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.706: bg 0: block 248: padding at end of block bitmap is not set [ 440.647494][ T8215] Quota error (device loop3): write_blk: dquota write failed [ 440.655710][ T8215] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 440.728616][ T5843] cdc_ncm 3-1:1.0: bind() failure [ 440.752746][ T8215] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.706: Failed to acquire dquot type 1 [ 440.812962][ T5843] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 440.823489][ T8215] EXT4-fs (loop3): 1 truncate cleaned up [ 440.874253][ T5843] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 440.887716][ T8215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 440.976507][ T5843] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 441.131450][ T5843] usb 3-1: USB disconnect, device number 8 [ 441.590764][ T8215] syz.3.706 (8215) used greatest stack depth: 3008 bytes left [ 441.709325][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 441.733041][ T2966] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 441.743238][ T2966] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 441.826553][ T5843] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 442.025718][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 442.070592][ T5843] usb 6-1: config 0 interface 0 has no altsetting 0 [ 442.077590][ T5843] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 442.086995][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.181814][ T5843] usb 6-1: config 0 descriptor?? [ 442.435882][ T5846] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 442.658702][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 442.692026][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.703547][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.716077][ T5846] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 442.726046][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.829837][ T5843] hid (null): unknown global tag 0xc [ 442.888259][ T5846] usb 3-1: config 0 descriptor?? [ 442.923531][ T5846] hub 3-1:0.0: USB hub found [ 443.168027][ T5843] usb 6-1: USB disconnect, device number 4 [ 443.176717][ T5846] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 443.634127][ T5846] hid-generic 0003:046D:C31C.000C: item fetching failed at offset 0/1 [ 443.669996][ T5846] hid-generic 0003:046D:C31C.000C: probe with driver hid-generic failed with error -22 [ 444.005838][ T5846] usb 3-1: USB disconnect, device number 9 [ 444.291712][ T8264] capability: warning: `syz.6.717' uses deprecated v2 capabilities in a way that may be insecure [ 445.471681][ T8271] loop5: detected capacity change from 0 to 4096 [ 445.541109][ T8271] EXT4-fs (loop5): Test dummy encryption mode enabled [ 445.641978][ T8271] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80ec018, mo2=0003] [ 445.693879][ T8271] System zones: 0-5 [ 446.030109][ T8271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.481569][ T8290] netlink: 16 bytes leftover after parsing attributes in process `syz.6.726'. [ 446.491075][ T8290] netlink: 56 bytes leftover after parsing attributes in process `syz.6.726'. [ 446.612361][ T8290] macvlan0: entered allmulticast mode [ 446.618191][ T8290] veth1_vlan: entered allmulticast mode [ 446.729155][ T6984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.077335][ T8296] can: request_module (can-proto-0) failed. [ 449.884466][ T8314] loop2: detected capacity change from 0 to 16 [ 450.026416][ T8314] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 450.147161][ T8314] erofs (device loop2): mounted with root inode @ nid 36. [ 450.654716][ T8322] loop6: detected capacity change from 0 to 128 [ 452.003955][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 453.247446][ T8282] Set syz1 is full, maxelem 65536 reached [ 455.936149][ T5846] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 456.144210][ T5846] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.154909][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.165675][ T5846] usb 4-1: Product: syz [ 456.170077][ T5846] usb 4-1: Manufacturer: syz [ 456.174966][ T5846] usb 4-1: SerialNumber: syz [ 457.418727][ T5846] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 457.425606][ T5846] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 457.433321][ T5846] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 457.671566][ T5846] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 457.692483][ T8382] loop6: detected capacity change from 0 to 32768 [ 457.705021][ T8382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.757 (8382) [ 457.737732][ T8382] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 457.750392][ T8382] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 457.852927][ T5846] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 457.902999][ T8398] loop5: detected capacity change from 0 to 8 [ 457.938403][ T8382] BTRFS info (device loop6): enabling ssd optimizations [ 457.946237][ T8382] BTRFS info (device loop6): turning on async discard [ 457.953317][ T8382] BTRFS info (device loop6): enabling free space tree [ 458.047429][ T5846] usb 4-1: USB disconnect, device number 15 [ 458.067283][ T5846] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 458.353015][ T7345] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 458.706005][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 458.750767][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.762'. [ 458.953136][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.963777][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.077662][ T8408] loop3: detected capacity change from 0 to 2048 [ 459.096136][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 459.106301][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 459.114497][ T10] usb 1-1: SerialNumber: syz [ 459.269583][ T8408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.493304][ T30] audit: type=1800 audit(1770649314.474:68): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.763" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 459.622438][ T10] usb 1-1: 0:2 : does not exist [ 459.652924][ T30] audit: type=1804 audit(1770649314.594:69): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.763" name="/newroot/151/file0/file1" dev="loop3" ino=1346 res=1 errno=0 [ 459.675607][ T30] audit: type=1800 audit(1770649314.594:70): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.763" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 459.876135][ T10] usb 1-1: USB disconnect, device number 8 [ 460.484737][ T8410] udevd[8410]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.080195][ T8436] loop2: detected capacity change from 0 to 512 [ 462.153541][ T8436] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 462.268515][ T8436] EXT4-fs (loop2): 1 truncate cleaned up [ 462.287598][ T8436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.611127][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.327134][ T8451] netlink: 'syz.2.777': attribute type 21 has an invalid length. [ 463.335100][ T8451] netlink: 'syz.2.777': attribute type 22 has an invalid length. [ 463.343158][ T8451] netlink: 'syz.2.777': attribute type 23 has an invalid length. [ 463.351199][ T8451] netlink: 'syz.2.777': attribute type 25 has an invalid length. [ 463.359302][ T8451] netlink: 'syz.2.777': attribute type 26 has an invalid length. [ 463.367352][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.777'. [ 463.823062][ T8456] loop6: detected capacity change from 0 to 128 [ 463.937345][ T8456] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 464.446175][ T12] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 465.889192][ T8474] loop0: detected capacity change from 0 to 4096 [ 466.092950][ T8485] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 467.197456][ T8494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.436884][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.797'. [ 467.665123][ T8497] ip6erspan1: entered allmulticast mode [ 468.550503][ T8505] loop0: detected capacity change from 0 to 2048 [ 468.772019][ T8512] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.929740][ T30] audit: type=1800 audit(1770649323.914:71): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.800" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 469.315770][ T5846] IPVS: starting estimator thread 0... [ 469.374987][ T8512] NILFS (loop0): writing node/leaf block does not appear in b-tree (ino=16) at key=0, level=1 [ 469.386562][ T8512] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16) [ 469.446630][ T8517] IPVS: using max 240 ests per chain, 12000 per kthread [ 469.473735][ T8512] Remounting filesystem read-only [ 469.491411][ T5782] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 469.786744][ T30] audit: type=1800 audit(1770649324.764:72): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.808" name="file1" dev="overlay" ino=893 res=0 errno=0 [ 470.571032][ T8536] loop5: detected capacity change from 0 to 512 [ 470.574217][ T8536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 470.854639][ T8536] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #11: comm syz.5.810: iget: bad extended attribute block 3153 [ 470.937123][ T8536] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.810: couldn't read orphan inode 11 (err -117) [ 471.019884][ T8536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.144836][ T5079] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 471.189279][ T8530] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.810: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 471.507341][ T6984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.385649][ T5846] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 472.618073][ T5846] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 472.629719][ T5846] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 472.641190][ T5846] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 472.650565][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.779651][ T8563] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 472.842651][ T5846] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.015605][ T8574] netlink: 14 bytes leftover after parsing attributes in process `syz.5.824'. [ 473.137659][ T8573] vlan2: entered allmulticast mode [ 473.143099][ T8573] bond0: entered allmulticast mode [ 473.148734][ T8573] bond_slave_0: entered allmulticast mode [ 473.156742][ T8573] bond_slave_1: entered allmulticast mode [ 473.184451][ T5846] usb 4-1: USB disconnect, device number 16 [ 473.483483][ T6314] udevd[6314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.500739][ T8574] bond0 (unregistering): left promiscuous mode [ 473.509240][ T8574] bond_slave_0: left promiscuous mode [ 473.521413][ T8574] bond_slave_1: left promiscuous mode [ 473.594098][ T8574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.637607][ T8574] bond_slave_0: left allmulticast mode [ 473.697564][ T8574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.710694][ T8574] bond_slave_1: left allmulticast mode [ 473.733767][ T8574] bond0 (unregistering): Released all slaves [ 474.013536][ T8583] loop2: detected capacity change from 0 to 256 [ 474.122908][ T8583] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 474.886373][ T8592] loop2: detected capacity change from 0 to 128 [ 474.957124][ T8592] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 475.005747][ T8592] hpfs: filesystem error: improperly stopped [ 475.011984][ T8592] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 475.020202][ T8592] hpfs: You really don't want any checks? You are crazy... [ 475.091754][ T8592] hpfs: hpfs_map_sector(): read error [ 475.098957][ T8592] hpfs: code page support is disabled [ 475.157446][ T8592] hpfs: hpfs_map_4sectors(): unaligned read [ 475.163700][ T8592] hpfs: hpfs_map_4sectors(): unaligned read [ 475.171028][ T8592] hpfs: filesystem error: unable to find root dir [ 475.197552][ T5079] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 475.207466][ T5079] Bluetooth: hci2: Injecting HCI hardware error event [ 475.215136][ T5079] Bluetooth: hci2: hardware error 0x00 [ 475.422422][ T8592] hpfs: hpfs_map_4sectors(): unaligned read [ 477.286249][ T5079] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 477.729283][ T8622] loop0: detected capacity change from 0 to 16 [ 477.769495][ T8622] erofs (device loop0): mounted with root inode @ nid 36. [ 478.178544][ T8630] loop3: detected capacity change from 0 to 512 [ 478.259978][ T8630] EXT4-fs: Ignoring removed orlov option [ 478.356786][ T8630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 478.533009][ T8630] EXT4-fs (loop3): 1 orphan inode deleted [ 478.539366][ T8630] EXT4-fs (loop3): 1 truncate cleaned up [ 478.554264][ T8630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.010704][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.902388][ T8647] loop6: detected capacity change from 0 to 2048 [ 479.994775][ T8647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.112733][ T30] audit: type=1800 audit(1770649335.094:73): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.854" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 480.145499][ T5846] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 480.214195][ T30] audit: type=1800 audit(1770649335.144:74): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.854" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 480.238034][ T30] audit: type=1804 audit(1770649335.174:75): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.854" name="/newroot/67/file0/file1" dev="loop6" ino=1346 res=1 errno=0 [ 480.260109][ T30] audit: type=1800 audit(1770649335.194:76): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.854" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 480.402495][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 480.465897][ T5846] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.477619][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 480.484571][ T5846] usb 3-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 480.496663][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.542439][ T5846] usb 3-1: config 0 descriptor?? [ 480.588098][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.594850][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.962694][ T5846] usbhid 3-1:0.0: can't add hid device: -71 [ 480.970193][ T5846] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 481.062551][ T5846] usb 3-1: USB disconnect, device number 10 [ 481.876220][ T8673] netlink: 'syz.0.863': attribute type 12 has an invalid length. [ 482.068660][ T8672] loop3: detected capacity change from 0 to 2048 [ 482.125484][ T8672] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 482.135686][ T8672] UDF-fs: Scanning with blocksize 512 failed [ 482.233172][ T8672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.163715][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.869'. [ 483.343429][ T8691] loop0: detected capacity change from 0 to 128 [ 483.353048][ T8688] bridge0: port 3(vlan2) entered blocking state [ 483.360100][ T8688] bridge0: port 3(vlan2) entered disabled state [ 483.397129][ T8688] vlan2: entered allmulticast mode [ 483.402600][ T8688] gretap0: entered allmulticast mode [ 483.436343][ T8688] vlan2: entered promiscuous mode [ 483.445938][ T8688] bridge0: port 3(vlan2) entered blocking state [ 483.452708][ T8688] bridge0: port 3(vlan2) entered forwarding state [ 483.559941][ T8691] syz.0.870: attempt to access beyond end of device [ 483.559941][ T8691] loop0: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 483.642770][ T8691] syz.0.870: attempt to access beyond end of device [ 483.642770][ T8691] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 483.657361][ T8691] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 483.671925][ T5846] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 483.722286][ T8691] syz.0.870: attempt to access beyond end of device [ 483.722286][ T8691] loop0: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 483.736583][ T8691] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 483.758232][ T8691] syz.0.870: attempt to access beyond end of device [ 483.758232][ T8691] loop0: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 483.773595][ T8691] Buffer I/O error on dev loop0, logical block 78, lost async page write [ 483.805935][ T8691] syz.0.870: attempt to access beyond end of device [ 483.805935][ T8691] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 483.820020][ T8691] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 483.853057][ T8691] syz.0.870: attempt to access beyond end of device [ 483.853057][ T8691] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 483.867595][ T8691] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 483.935674][ T5846] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 483.945581][ T5846] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 483.956236][ T5846] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 483.995865][ T5846] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 484.008690][ T5846] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 484.033479][ T8694] syz.0.870: attempt to access beyond end of device [ 484.033479][ T8694] loop0: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 484.088310][ T5846] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 484.098026][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 484.106441][ T5846] usb 3-1: Product: syz [ 484.111808][ T5846] usb 3-1: Manufacturer: syz [ 484.333220][ T5846] cdc_wdm 3-1:1.0: skipping garbage [ 484.339060][ T5846] cdc_wdm 3-1:1.0: skipping garbage [ 484.399832][ T5846] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 484.406519][ T5846] cdc_wdm 3-1:1.0: Unknown control protocol [ 485.035839][ T5846] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 485.097867][ T8709] loop0: detected capacity change from 0 to 128 [ 485.165590][ T8709] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 485.301107][ T5846] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 485.313169][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.322338][ T5846] usb 4-1: Product: syz [ 485.326911][ T5846] usb 4-1: Manufacturer: syz [ 485.331834][ T5846] usb 4-1: SerialNumber: syz [ 485.510498][ T5846] usb 4-1: config 0 descriptor?? [ 486.140757][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 486.305151][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 486.311984][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 486.319847][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 486.326642][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 486.336865][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 486.343739][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 486.355711][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 486.362509][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 486.376358][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 486.383101][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 486.390338][ T5843] usb 3-1: USB disconnect, device number 11 [ 486.397007][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 486.397108][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 486.397213][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 486.659920][ T5846] usb 4-1: Firmware version (0.0) predates our first public release. [ 486.671233][ T5846] usb 4-1: Please update to version 0.2 or newer [ 486.930139][ T8721] vcan0: tx drop: invalid sa for name 0x0000000000000104 [ 487.105632][ T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 487.332695][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.343124][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.357609][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.366997][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.561808][ T9] usb 4-1: USB disconnect, device number 17 [ 487.854730][ T10] usb 7-1: usb_control_msg returned -32 [ 487.860786][ T10] usbtmc 7-1:16.0: can't read capabilities [ 488.307807][ T5846] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 488.486035][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 488.526973][ T5846] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 488.535954][ T5846] usb 4-1: config 0 has no interface number 0 [ 488.591612][ T5846] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 488.601541][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.610045][ T5846] usb 4-1: Product: syz [ 488.615412][ T5846] usb 4-1: Manufacturer: syz [ 488.620222][ T5846] usb 4-1: SerialNumber: syz [ 488.679168][ T5846] usb 4-1: config 0 descriptor?? [ 488.714755][ T5846] smsc95xx v2.0.0 [ 489.184239][ T5846] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 489.195519][ T5846] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 489.865888][ T5846] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 489.926931][ T5846] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 490.010535][ T5846] usb 4-1: USB disconnect, device number 18 [ 490.130161][ T5845] usb 7-1: USB disconnect, device number 2 [ 490.578544][ T8754] loop5: detected capacity change from 0 to 128 [ 490.708859][ T8753] loop6: detected capacity change from 0 to 2048 [ 490.852071][ T8753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.870149][ T8753] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.075654][ T5845] kernel read not supported for file / (pid: 5845 comm: kworker/1:4) [ 491.597263][ T7345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.770986][ T8768] veth0: entered promiscuous mode [ 491.867299][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 492.216637][ T8778] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 492.224686][ T8778] netlink: 68 bytes leftover after parsing attributes in process `syz.0.903'. [ 492.876375][ T5794] Bluetooth: hci4: command 0x0406 tx timeout [ 493.135802][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 493.343645][ T9] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 493.352675][ T9] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 493.361833][ T9] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 493.371281][ T9] usb 4-1: config 250 has no interface number 0 [ 493.486029][ T9] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 493.499425][ T9] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 493.510895][ T9] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 493.530961][ T9] usb 4-1: config 250 interface 228 has no altsetting 0 [ 493.714698][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 493.724348][ T9] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 493.734276][ T9] usb 4-1: Product: syz [ 493.739093][ T9] usb 4-1: SerialNumber: syz [ 493.774621][ T8797] ALSA: seq fatal error: cannot create timer (-16) [ 493.826600][ T9] hub 4-1:250.228: bad descriptor, ignoring hub [ 493.833106][ T9] hub 4-1:250.228: probe with driver hub failed with error -5 [ 494.060797][ T9] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 494.357165][ T9] usb 4-1: reset full-speed USB device number 19 using dummy_hcd [ 494.689023][ C1] Unknown status report in ack skb [ 495.178610][ T5845] usb 4-1: USB disconnect, device number 19 [ 495.227717][ T5845] usblp0: removed [ 497.303670][ T8839] loop2: detected capacity change from 0 to 256 [ 497.384495][ T8839] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.628432][ T8842] loop5: detected capacity change from 0 to 2048 [ 497.750657][ T8842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.879459][ T8842] EXT4-fs (loop5): shut down requested (2) [ 498.226541][ T6984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.334695][ T8851] loop0: detected capacity change from 0 to 256 [ 498.602068][ T8851] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 498.676491][ T8851] exFAT-fs (loop0): failed to load alloc-bitmap [ 498.683020][ T8851] exFAT-fs (loop0): failed to recognize exfat type [ 499.075625][ T5845] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 499.301797][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.313362][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.401619][ T5845] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 499.411881][ T5845] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 499.420233][ T5845] usb 6-1: Manufacturer: syz [ 499.513680][ T5845] usb 6-1: config 0 descriptor?? [ 499.801479][ T8870] netlink: 14 bytes leftover after parsing attributes in process `syz.2.942'. [ 499.830675][ T8869] vlan2: entered allmulticast mode [ 499.836352][ T8869] bond0: entered allmulticast mode [ 499.846794][ T8869] bond_slave_0: entered allmulticast mode [ 499.853525][ T8869] bond_slave_1: entered allmulticast mode [ 500.128919][ T8870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.176355][ T8870] bond_slave_0: left allmulticast mode [ 500.211602][ T8870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.272121][ T8870] bond_slave_1: left allmulticast mode [ 500.339337][ T8870] bond0 (unregistering): Released all slaves [ 500.634495][ T5845] uclogic 0003:256C:006D.000D: v1 frame probing failed: -71 [ 500.642705][ T5845] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 500.650876][ T5845] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 500.737064][ T5845] usb 6-1: USB disconnect, device number 5 [ 503.844000][ T8911] loop6: detected capacity change from 0 to 512 [ 504.036414][ T8911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 504.071611][ T8911] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 504.479723][ T7345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 504.917517][ T8923] loop2: detected capacity change from 0 to 256 [ 505.016154][ T8923] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 505.188006][ T30] audit: type=1800 audit(1770649360.174:77): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.965" name="file1" dev="loop2" ino=1048640 res=0 errno=0 [ 505.258534][ T8923] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2048) [ 505.267252][ T8923] FAT-fs (loop2): Filesystem has been set read-only [ 505.324992][ T8923] FAT-fs (loop2): error, invalid FAT chain (i_pos 196, last_block 8200) [ 505.335582][ T30] audit: type=1800 audit(1770649360.204:78): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.965" name="file1" dev="loop2" ino=1048640 res=0 errno=0 [ 505.906131][ T8935] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 506.619632][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 506.836744][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 506.863977][ T8944] loop6: detected capacity change from 0 to 2640 [ 506.885942][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.897414][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.907674][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 506.917530][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.939617][ T8944] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.978400][ T8944] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.021771][ T8944] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.029811][ T10] usb 1-1: config 0 descriptor?? [ 507.068569][ T10] hub 1-1:0.0: USB hub found [ 507.100509][ T8944] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.125616][ T8944] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.152380][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f4cf800: rx timeout, send abort [ 507.157122][ T8947] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.165897][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f4cf800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 507.205624][ T8943] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.275846][ T8944] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.296442][ T10] hub 1-1:0.0: 1 port detected [ 507.316906][ T8944] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.404680][ T8944] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.413089][ T8944] ldm_validate_partition_table(): Disk read failed. [ 507.497074][ T8944] Dev loop6: unable to read RDB block 0 [ 507.550010][ T8944] loop6: unable to read partition table [ 507.666808][ T8944] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 508.237017][ T10] hub 1-1:0.0: activate --> -90 [ 508.425640][ T8962] binder: 8960:8962 ioctl c0306201 80000040 returned -11 [ 508.500341][ T9] usb 1-1: USB disconnect, device number 9 [ 508.538918][ T8964] Bluetooth: MGMT ver 1.23 [ 509.215690][ T5845] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 509.458684][ T5845] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 509.468314][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.478958][ T5845] usb 6-1: Product: syz [ 509.483310][ T5845] usb 6-1: Manufacturer: syz [ 509.488818][ T5845] usb 6-1: SerialNumber: syz [ 509.620847][ T5845] usb 6-1: config 0 descriptor?? [ 509.905799][ T5845] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 509.944288][ T8982] loop6: detected capacity change from 0 to 2048 [ 510.199050][ T8982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.426654][ T8986] loop3: detected capacity change from 0 to 256 [ 510.509978][ T8986] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 510.664328][ T8986] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 510.946018][ T5845] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 511.014656][ T5845] usb 6-1: USB disconnect, device number 6 [ 511.107569][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 511.565978][ T30] audit: type=1326 audit(1770649366.544:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8995 comm="syz.0.994" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x0 [ 514.977248][ T9081] loop6: detected capacity change from 0 to 2048 [ 515.074410][ T9085] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.092058][ T9076] loop2: detected capacity change from 0 to 8192 [ 517.084539][ T9106] batadv_slave_1: entered promiscuous mode [ 517.099256][ T9105] batadv_slave_1: left promiscuous mode [ 517.965507][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 518.184001][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.245874][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 518.307414][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.318284][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.328943][ T9] usb 3-1: Product: syz [ 518.333291][ T9] usb 3-1: Manufacturer: syz [ 518.338319][ T9] usb 3-1: SerialNumber: syz [ 518.545034][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 518.655865][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 518.773589][ T9111] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 518.888948][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.900210][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.963534][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 518.973189][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 518.981683][ T10] usb 6-1: SerialNumber: syz [ 519.374867][ T10] usb 6-1: 0:2 : does not exist [ 519.423595][ T9111] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 519.520952][ T9] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 519.529317][ T9] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 519.655100][ T10] usb 6-1: USB disconnect, device number 7 [ 519.689788][ T9] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 519.730567][ T9] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 519.788897][ T9] wwan wwan0: port wwan0mbim0 attached [ 519.851122][ T9] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 5a:25:39:9f:4d:02 [ 519.993891][ T9] usb 3-1: USB disconnect, device number 12 [ 520.010384][ T6314] udevd[6314]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.048004][ T9] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 520.195435][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 522.843211][ T9160] loop0: detected capacity change from 0 to 256 [ 523.027138][ T9160] exFAT-fs (loop0): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 523.565475][ T9172] SQUASHFS error: Failed to read block 0x0: -5 [ 523.761016][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 524.048516][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1040'. [ 524.058281][ T9181] netlink: 'syz.5.1040': attribute type 18 has an invalid length. [ 524.280588][ T9181] vxlan0: entered promiscuous mode [ 524.446199][ T59] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.515877][ T58] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.524880][ T58] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.592425][ T58] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.072969][ T9191] loop0: detected capacity change from 0 to 64 [ 525.562381][ T9198] loop5: detected capacity change from 0 to 1024 [ 526.143922][ T9203] loop0: detected capacity change from 0 to 256 [ 526.442676][ T9209] binder: 9207:9209 ioctl c0306201 0 returned -14 [ 526.469508][ T9208] tipc: Started in network mode [ 526.475650][ T9208] tipc: Node identity ac1414aa, cluster identity 4711 [ 526.504872][ T9211] binder: 9207:9211 ioctl c0306201 0 returned -14 [ 526.541468][ T9208] tipc: New replicast peer: 100.1.1.1 [ 526.548568][ T9208] tipc: Enabled bearer , priority 10 [ 527.670226][ T9] tipc: Node number set to 2886997162 [ 527.978230][ T5845] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 528.202490][ T5845] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.214933][ T5845] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.228936][ T5845] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.238315][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.455642][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 528.654470][ T5845] usb 4-1: usb_control_msg returned -32 [ 528.660629][ T5845] usbtmc 4-1:16.0: can't read capabilities [ 528.666916][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 528.708619][ T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 528.718410][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.729895][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.814178][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 528.824078][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.834741][ T9] usb 7-1: Product: syz [ 528.839399][ T9] usb 7-1: Manufacturer: syz [ 528.844160][ T9] usb 7-1: SerialNumber: syz [ 529.386067][ T9245] loop5: detected capacity change from 0 to 512 [ 529.489552][ T9] usb 7-1: 0:2 : does not exist [ 529.599663][ T9245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.709254][ T9245] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.830817][ T9245] EXT4-fs (loop5): shut down requested (2) [ 530.218553][ T6984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.342563][ T5845] usb 7-1: USB disconnect, device number 3 [ 530.439837][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.899727][ T9256] pim6reg1: entered promiscuous mode [ 530.907233][ T9256] pim6reg1: entered allmulticast mode [ 530.990157][ T9] usb 4-1: USB disconnect, device number 20 [ 533.583918][ T5079] Bluetooth: hci3: ISO packet too small [ 536.175112][ T9319] loop2: detected capacity change from 0 to 1024 [ 536.360276][ T9319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.402749][ T30] audit: type=1800 audit(1770649391.384:80): pid=9319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1096" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 536.870165][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.075955][ T9369] Bluetooth: hci0: unsupported parameter 255 [ 540.082168][ T9369] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 540.326847][ T9375] loop3: detected capacity change from 0 to 256 [ 540.384365][ T9375] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 540.553619][ T9377] loop2: detected capacity change from 0 to 1024 [ 540.734111][ T30] audit: type=1800 audit(1770649395.714:81): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1116" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 540.762347][ T9377] hfsplus: request for non-existent node 33554434 in B*Tree [ 540.770630][ T9377] hfsplus: request for non-existent node 33554434 in B*Tree [ 540.823523][ T9377] hfsplus: request for non-existent node 33554434 in B*Tree [ 540.831133][ T9377] hfsplus: request for non-existent node 33554434 in B*Tree [ 541.293080][ T9029] hfsplus: request for non-existent node 33554434 in B*Tree [ 541.300956][ T9029] hfsplus: request for non-existent node 33554434 in B*Tree [ 541.684610][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'. [ 542.022164][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.029035][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.438019][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 542.543373][ T9405] loop2: detected capacity change from 0 to 128 [ 542.737667][ T9405] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 542.876536][ T9405] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 543.345833][ T5845] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 543.383254][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 543.585586][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.597114][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.608086][ T5845] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 543.617679][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.656771][ T5845] usb 6-1: config 0 descriptor?? [ 544.094416][ T9426] loop3: detected capacity change from 0 to 512 [ 544.118971][ T9425] loop0: detected capacity change from 0 to 256 [ 544.167245][ T5845] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 544.231313][ T9426] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 544.314442][ T5845] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 544.340506][ T9426] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 544.417807][ T9425] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 544.444047][ T9424] loop2: detected capacity change from 0 to 1024 [ 544.511720][ T5845] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x4D [ 544.536689][ T9424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 544.625694][ T9424] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 544.639403][ T9424] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 544.743846][ T9424] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 544.755082][ T9424] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: comm syz.2.1133: inode #1: comm syz.2.1133: iget: illegal inode # [ 544.847174][ T9424] EXT4-fs (loop2): Remounting filesystem read-only [ 544.854191][ T9424] EXT4-fs (loop2): no journal found [ 544.967591][ T5792] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 544.991196][ T5845] cp2112 0003:10C4:EA90.000E: error setting SMBus config [ 545.037005][ T5845] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 545.130077][ T5845] usb 6-1: USB disconnect, device number 8 [ 545.217778][ T9430] fido_id[9430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 546.169298][ T9443] loop3: detected capacity change from 0 to 1024 [ 546.273672][ T9445] loop5: detected capacity change from 0 to 1024 [ 546.339092][ T9443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 546.422886][ T9443] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.572938][ T9443] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1141: bg 0: block 112: padding at end of block bitmap is not set [ 546.626493][ T9443] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 546.639564][ T9443] EXT4-fs (loop3): This should not happen!! Data will be lost [ 546.639564][ T9443] [ 546.694223][ T9454] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.1141: lblock 3 mapped to illegal pblock 3 (length 1) [ 546.869915][ T9457] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1141: lblock 0 mapped to illegal pblock 0 (length 1) [ 547.106043][ T5845] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 547.207392][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 547.295714][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 547.330018][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 547.357697][ T5845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.371007][ T5845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.409495][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 547.458804][ T5845] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 547.470584][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.480015][ T5845] usb 3-1: Product: syz [ 547.484361][ T5845] usb 3-1: Manufacturer: syz [ 547.489195][ T5845] usb 3-1: SerialNumber: syz [ 547.577337][ T9] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 547.587645][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.629066][ T9] usb 7-1: config 0 descriptor?? [ 547.847194][ T5845] usb 3-1: 0:2 : does not exist [ 547.916746][ T5845] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 548.143494][ T5845] usb 3-1: USB disconnect, device number 13 [ 548.343893][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.921394][ T9] pegasus 7-1:0.0: can't reset MAC [ 548.951007][ T9] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 549.065849][ T9] usb 7-1: USB disconnect, device number 4 [ 549.496985][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1157'. [ 552.228991][ T9505] loop5: detected capacity change from 0 to 8192 [ 553.672510][ T9527] loop5: detected capacity change from 0 to 512 [ 553.740809][ T9527] EXT4-fs: Ignoring removed oldalloc option [ 553.877321][ T9527] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1177: Parent and EA inode have the same ino 15 [ 553.948578][ T9527] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 553.990282][ T9527] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1177: Parent and EA inode have the same ino 15 [ 554.039654][ T9527] EXT4-fs (loop5): 1 orphan inode deleted [ 554.068858][ T9527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.680614][ T6984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.016736][ T5845] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 556.175550][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 556.189510][ T5845] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 556.199311][ T5845] usb 3-1: config 1 has no interface number 0 [ 556.219516][ T5845] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 556.230198][ T5845] usb 3-1: config 1 interface 105 has no altsetting 0 [ 556.282131][ T5845] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 556.292053][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.301336][ T5845] usb 3-1: Product: syz [ 556.306029][ T5845] usb 3-1: Manufacturer: syz [ 556.310823][ T5845] usb 3-1: SerialNumber: syz [ 556.644443][ T5845] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 556.849100][ T9] usb 3-1: USB disconnect, device number 14 [ 557.975292][ T5845] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 558.016648][ T9576] loop2: detected capacity change from 0 to 128 [ 558.027289][ T5845] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 558.087300][ T9576] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 558.125562][ T9575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.247262][ T5845] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 558.481473][ T5845] usb 7-1: config 0 has no interfaces? [ 558.509967][ T5845] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 558.523303][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 558.533859][ T5845] usb 7-1: SerialNumber: syz [ 558.616960][ T5845] usb 7-1: config 0 descriptor?? [ 558.912817][ T5845] usb 7-1: USB disconnect, device number 5 [ 558.969155][ T9579] fido_id[9579]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 559.112016][ T9581] loop3: detected capacity change from 0 to 512 [ 559.296824][ T9581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.339020][ T9581] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 560.052929][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.331536][ T9601] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 560.466279][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.476376][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.262884][ T9613] Bluetooth: hci0: invalid length 3, exp 2 for type 25 [ 561.494680][ T5845] IPVS: starting estimator thread 0... [ 561.606513][ T9620] IPVS: using max 240 ests per chain, 12000 per kthread [ 562.164367][ T9629] loop3: detected capacity change from 0 to 64 [ 562.373186][ T30] audit: type=1800 audit(1770649417.354:82): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1218" name="file1" dev="loop3" ino=23 res=0 errno=0 [ 562.405776][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 562.619572][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.630944][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 562.642021][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.772266][ T5845] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 562.817664][ T9] usb 3-1: config 0 descriptor?? [ 562.963307][ T5845] usb 6-1: Using ep0 maxpacket: 16 [ 563.016031][ T5845] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 563.030123][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 563.147193][ T5845] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 563.156619][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.165818][ T5845] usb 6-1: Product: syz [ 563.170169][ T5845] usb 6-1: Manufacturer: syz [ 563.174960][ T5845] usb 6-1: SerialNumber: syz [ 563.245372][ T5845] usb 6-1: config 0 descriptor?? [ 563.286052][ T5845] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 563.295991][ T5845] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 563.330978][ T9] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 563.485827][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0010/input/input15 [ 563.779889][ T9] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 563.825880][ T9643] loop0: detected capacity change from 0 to 2048 [ 563.942141][ T5845] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 563.964624][ T9643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.999192][ T5845] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 564.140769][ T30] audit: type=1800 audit(1770649419.124:83): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1223" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 564.238662][ T5845] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 564.246148][ T5845] em28xx 6-1:0.0: No AC97 audio processor [ 564.337295][ T5845] usb 6-1: USB disconnect, device number 9 [ 564.363466][ T5845] em28xx 6-1:0.0: Disconnecting em28xx [ 564.441857][ T5845] em28xx 6-1:0.0: Freeing device [ 565.942003][ T5845] usb 3-1: USB disconnect, device number 15 [ 566.139098][ T9660] loop5: detected capacity change from 0 to 128 [ 566.236930][ T9660] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 566.290285][ T9660] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 566.702636][ T6984] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 566.712603][ T9665] loop3: detected capacity change from 0 to 2048 [ 566.796560][ T9665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.873631][ T9670] batman_adv: batadv0: Adding interface: ip6gretap1 [ 566.880875][ T9670] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.907307][ T9670] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 568.139617][ T9687] loop3: detected capacity change from 0 to 128 [ 568.320417][ T9687] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 568.439535][ T9687] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 568.862154][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 570.324601][ T9717] loop0: detected capacity change from 0 to 128 [ 570.372279][ T9715] loop6: detected capacity change from 0 to 8 [ 570.416586][ T9717] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 570.429116][ T9715] squashfs: Unknown parameter 'ÿÿÿÿ' [ 571.242356][ T5845] kernel read not supported for file /vcs (pid: 5845 comm: kworker/1:4) [ 571.552041][ T9727] loop6: detected capacity change from 0 to 2048 [ 571.695679][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 571.706111][ T9733] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 571.844197][ T30] audit: type=1800 audit(1770649426.814:84): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1256" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 571.871866][ T9727] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 571.922824][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.945634][ T9727] Remounting filesystem read-only [ 571.952770][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 571.964942][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 571.977543][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 571.987995][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 572.016323][ T9727] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 1970324836974592 [ 572.025834][ T9727] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=15) [ 572.035121][ T9727] NILFS (loop6): error -5 truncating bmap (ino=15) [ 572.061146][ T9736] loop3: detected capacity change from 0 to 512 [ 572.067682][ T9] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 572.067817][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 572.067951][ T9] usb 6-1: Product: syz [ 572.091438][ T9] usb 6-1: Manufacturer: syz [ 572.096463][ T9] usb 6-1: SerialNumber: syz [ 572.166249][ T9] usb 6-1: config 0 descriptor?? [ 572.182099][ T9736] EXT4-fs: Ignoring removed oldalloc option [ 572.330698][ T9736] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1259: Parent and EA inode have the same ino 15 [ 572.428839][ T7345] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 572.501665][ T9736] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1259: Parent and EA inode have the same ino 15 [ 572.505770][ T9] radio-si470x 6-1:0.0: DeviceID=0x7379 ChipID=0x732f [ 572.544000][ T9736] EXT4-fs (loop3): 1 orphan inode deleted [ 572.579284][ T9736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.688861][ T9] radio-si470x 6-1:0.0: software version 115, hardware version 121 [ 572.907099][ T9] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 573.163557][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.208247][ T9749] loop6: detected capacity change from 0 to 512 [ 573.441080][ T9749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.537115][ T9] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 573.581424][ T9] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 573.607962][ T9749] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.661625][ T9] usb 6-1: USB disconnect, device number 10 [ 573.724725][ T30] audit: type=1800 audit(1770649428.704:85): pid=9749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1262" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 574.030692][ T7345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.625666][ T5845] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 574.654658][ T9767] openvswitch: netlink: VXLAN extension message has 249 unknown bytes. [ 574.817044][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 574.846095][ T5845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.891707][ T5845] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 574.901731][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 574.912422][ T5845] usb 4-1: SerialNumber: syz [ 574.991118][ T5845] usb 4-1: config 0 descriptor?? [ 575.054951][ T5845] uvcvideo 4-1:0.0: Found UVC 0.00 device (05ac:8501) [ 575.079433][ T5845] uvcvideo 4-1:0.0: Failed to create links for entity 255 [ 575.087088][ T5845] uvcvideo 4-1:0.0: Failed to register entities (-22). [ 575.137038][ T9774] netlink: 'syz.5.1274': attribute type 12 has an invalid length. [ 575.147755][ T9774] netlink: 'syz.5.1274': attribute type 29 has an invalid length. [ 575.156347][ T9774] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1274'. [ 575.165929][ T9774] netlink: 'syz.5.1274': attribute type 2 has an invalid length. [ 575.173827][ T9774] netlink: 'syz.5.1274': attribute type 3 has an invalid length. [ 575.182075][ T9774] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1274'. [ 575.260002][ T9] usb 4-1: USB disconnect, device number 21 [ 575.796036][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804bba9e00: rx timeout, send abort [ 575.806406][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804bba9e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 575.885653][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 576.080236][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 576.107734][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 576.145683][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 576.156082][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 576.167638][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 576.178142][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.191570][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 576.201046][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.394241][ T9789] loop6: detected capacity change from 0 to 128 [ 576.476038][ T9789] FAT-fs (loop6): bogus number of reserved sectors [ 576.482849][ T9789] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 576.492639][ T9789] FAT-fs (loop6): Can't find a valid FAT filesystem [ 576.621826][ T9] usb 1-1: usb_control_msg returned -32 [ 576.628020][ T9] usbtmc 1-1:16.0: can't read capabilities [ 577.042338][ T9796] netlink: 'syz.3.1283': attribute type 10 has an invalid length. [ 577.053397][ T9796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1283'. [ 577.290272][ T9796] team0: Port device netdevsim1 added [ 578.047711][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1287'. [ 578.057873][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1287'. [ 578.758769][ T9] usb 1-1: USB disconnect, device number 10 [ 580.120809][ T5845] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 580.390135][ T5845] usb 1-1: Using ep0 maxpacket: 8 [ 580.416237][ T5845] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.426877][ T5845] usb 1-1: config 0 has no interfaces? [ 580.432594][ T5845] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 580.444333][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.554326][ T5845] usb 1-1: config 0 descriptor?? [ 580.868850][ T9] usb 1-1: USB disconnect, device number 11 [ 582.584779][ T5845] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 582.663359][ T5845] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 582.805978][ T9859] loop6: detected capacity change from 0 to 1024 [ 583.475760][ T9029] hfsplus: b-tree write err: -5, ino 4 [ 583.578794][ T9865] fido_id[9865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 584.096416][ T9880] veth1_vlan: left allmulticast mode [ 584.120292][ T9880] macvlan0: left allmulticast mode [ 584.214393][ T9880] netlink: 'syz.6.1310': attribute type 1 has an invalid length. [ 584.222815][ T9880] netlink: 'syz.6.1310': attribute type 2 has an invalid length. [ 584.715565][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 584.933939][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.944997][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.005837][ T9] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 585.016966][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 585.128538][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 585.138488][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 585.148018][ T9] usb 4-1: SerialNumber: syz [ 585.489770][ T9] usb 4-1: 0:2 : does not exist [ 585.495073][ T9] usb 4-1: unit 5 not found! [ 585.667021][ T9] usb 4-1: USB disconnect, device number 22 [ 585.908023][ T30] audit: type=1326 audit(1770649440.894:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.0.1316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7fc00000 [ 585.931152][ T30] audit: type=1326 audit(1770649440.894:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.0.1316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7fc00000 [ 585.953574][ T30] audit: type=1326 audit(1770649440.894:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.0.1316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7fc00000 [ 586.139656][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.340626][ T9901] loop2: detected capacity change from 0 to 2048 [ 586.590706][ T9901] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 586.638612][ T9901] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 586.646815][ T9901] UDF-fs: Scanning with blocksize 512 failed [ 586.852077][ T9901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 587.006027][ T9901] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 587.028158][ T9901] nullb0: p1 start 1798234379 is beyond EOD, truncated [ 587.036737][ T9901] nullb0: p2 start 808464432 is beyond EOD, truncated [ 587.043754][ T9901] nullb0: p3 start 1715299433 is beyond EOD, truncated [ 587.051945][ T9901] nullb0: p4 start 808467812 is beyond EOD, truncated [ 587.060006][ T9901] nullb0: p5 start 1965843553 is beyond EOD, truncated [ 587.068172][ T9901] nullb0: p6 start 808464445 is beyond EOD, truncated [ 588.797301][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 589.264653][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 589.996468][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 590.022031][ T5845] kernel write not supported for file 716/task/717/setgroups (pid: 5845 comm: kworker/1:4) [ 590.062454][ T9952] loop2: detected capacity change from 0 to 47 [ 590.181278][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 590.208245][ T9954] loop3: detected capacity change from 0 to 512 [ 590.243725][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.254490][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.338638][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.348352][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.356755][ T9] usb 7-1: Product: syz [ 590.361115][ T9] usb 7-1: Manufacturer: syz [ 590.366429][ T9] usb 7-1: SerialNumber: syz [ 590.383714][ T9954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.746803][ T9] usb 7-1: 0:2 : does not exist [ 590.813061][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 590.870814][ T9959] netlink: 'syz.0.1343': attribute type 6 has an invalid length. [ 590.930895][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.056425][ T9] usb 7-1: USB disconnect, device number 6 [ 591.704518][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.823253][ T9970] loop5: detected capacity change from 0 to 128 [ 591.929971][ T9970] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 592.121915][ T9970] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.359836][ T9970] overlayfs: upper fs needs to support d_type. [ 592.718280][ T6984] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 592.749845][ T9980] loop0: detected capacity change from 0 to 256 [ 594.146903][ T9998] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 596.811116][T10024] loop2: detected capacity change from 0 to 2048 [ 596.973983][T10029] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 597.082868][ T30] audit: type=1800 audit(1770649452.054:89): pid=10024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1371" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 597.147848][T10024] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 597.269607][T10024] Remounting filesystem read-only [ 597.283464][T10024] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 1970324836974592 [ 597.293168][T10024] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 597.303375][T10024] NILFS (loop2): error -5 truncating bmap (ino=15) [ 597.383689][T10035] Bluetooth: hci0: unsupported parameter 256 [ 597.390494][T10035] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 597.630916][ T5786] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 598.243108][T10043] loop3: detected capacity change from 0 to 128 [ 598.333204][T10043] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 598.570316][T10043] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 598.586133][T10046] binder: 10045:10046 ioctl 40046205 0 returned -22 [ 599.708532][T10064] loop0: detected capacity change from 0 to 1024 [ 599.899628][T10067] loop2: detected capacity change from 0 to 256 [ 599.923077][T10064] hfsplus: request for non-existent node 33554434 in B*Tree [ 599.931166][T10064] hfsplus: request for non-existent node 33554434 in B*Tree [ 600.418952][ T36] hfsplus: request for non-existent node 33554434 in B*Tree [ 600.426656][ T36] hfsplus: request for non-existent node 33554434 in B*Tree [ 600.452893][T10071] loop3: detected capacity change from 0 to 2048 [ 600.548521][T10071] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.664289][ T30] audit: type=1800 audit(1770649455.644:90): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1391" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 600.764533][ T30] audit: type=1800 audit(1770649455.684:91): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1391" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 601.054639][T10080] loop0: detected capacity change from 0 to 256 [ 601.694223][T10089] loop3: detected capacity change from 0 to 1024 [ 601.867060][ T30] audit: type=1800 audit(1770649456.854:92): pid=10089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1397" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 602.249700][ T9029] hfsplus: b-tree write err: -5, ino 4 [ 603.458145][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.464862][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 603.918123][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 604.121857][ T9] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 604.133906][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 604.145621][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 604.157200][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 604.306216][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 604.315868][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 604.324220][ T9] usb 3-1: Product: syz [ 604.329804][ T9] usb 3-1: Manufacturer: syz [ 604.334580][ T9] usb 3-1: SerialNumber: syz [ 604.392413][T10116] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 604.436524][ T9] usb 3-1: config 0 descriptor?? [ 604.516992][T10112] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 604.551380][ T9] usb 3-1: selecting invalid altsetting 0 [ 604.639917][T10122] bridge0: entered allmulticast mode [ 604.809998][T10122] pim6reg: entered allmulticast mode [ 604.887549][T10112] usb 3-1: BOGUS urb xfer, pipe 0 != type 1 [ 606.044107][T10137] loop3: detected capacity change from 0 to 256 [ 606.430596][T10137] FAT-fs (loop3): Directory bread(block 64) failed [ 606.467569][T10137] FAT-fs (loop3): Directory bread(block 65) failed [ 606.521117][T10137] FAT-fs (loop3): Directory bread(block 66) failed [ 606.562376][T10137] FAT-fs (loop3): Directory bread(block 67) failed [ 606.562675][T10137] FAT-fs (loop3): Directory bread(block 68) failed [ 606.562775][T10137] FAT-fs (loop3): Directory bread(block 69) failed [ 606.563020][T10137] FAT-fs (loop3): Directory bread(block 70) failed [ 606.563144][T10137] FAT-fs (loop3): Directory bread(block 71) failed [ 606.563491][T10137] FAT-fs (loop3): Directory bread(block 72) failed [ 606.563603][T10137] FAT-fs (loop3): Directory bread(block 73) failed [ 606.720754][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 606.806469][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 606.879453][T10112] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 606.882812][ T9] usb 3-1: USB disconnect, device number 16 [ 606.895812][T10137] syz.3.1415: attempt to access beyond end of device [ 606.895812][T10137] loop3: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 606.902488][T10137] loop2: detected capacity change from 0 to 7 [ 606.930322][T10137] Dev loop2: unable to read RDB block 7 [ 606.930493][T10137] loop2: AHDI p1 p2 p3 [ 606.930729][T10137] loop2: partition table partially beyond EOD, truncated [ 606.931789][T10137] loop2: p1 start 1601398130 is beyond EOD, truncated [ 606.931910][T10137] loop2: p2 start 1702059890 is beyond EOD, truncated [ 606.937615][T10143] loop6: detected capacity change from 0 to 128 [ 607.099785][T10143] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 607.101676][T10143] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 607.566953][ T7345] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 607.924576][T10147] loop2: detected capacity change from 0 to 1024 [ 608.014678][T10147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 608.073042][T10147] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 608.086989][T10147] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 608.169013][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 608.189317][T10147] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 608.199786][T10147] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: comm syz.2.1418: inode #1: comm syz.2.1418: iget: illegal inode # [ 608.408208][T10147] EXT4-fs (loop2): Remounting filesystem read-only [ 608.415029][T10147] EXT4-fs (loop2): no journal found [ 608.585688][T10160] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1423'. [ 608.727835][T10156] loop6: detected capacity change from 0 to 4096 [ 608.775054][T10156] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 608.875168][T10164] loop0: detected capacity change from 0 to 64 [ 609.015689][ T5845] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 609.056554][ T30] audit: type=1800 audit(1770649464.034:93): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1425" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 609.116002][T10164] syz.0.1425: attempt to access beyond end of device [ 609.116002][T10164] loop0: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 609.177641][T10164] syz.0.1425: attempt to access beyond end of device [ 609.177641][T10164] loop0: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 609.276174][ T5845] usb 4-1: unable to get BOS descriptor or descriptor too short [ 609.298916][ T5845] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 609.319154][ T5845] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 609.327466][ T5845] usb 4-1: can't read configurations, error -71 [ 609.354035][T10164] syz.0.1425: attempt to access beyond end of device [ 609.354035][T10164] loop0: rw=34817, sector=76, nr_sectors = 68 limit=64 [ 609.459816][T10164] syz.0.1425: attempt to access beyond end of device [ 609.459816][T10164] loop0: rw=8423425, sector=4172, nr_sectors = 22 limit=64 [ 609.539117][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1427'. [ 609.549867][T10169] openvswitch: netlink: Port 1661468696 exceeds max allowable 65535 [ 611.249300][T10187] loop5: detected capacity change from 0 to 1024 [ 611.301447][T10189] input: syz1 as /devices/virtual/input/input16 [ 611.716768][ T1038] hfsplus: b-tree write err: -5, ino 4 [ 612.586319][T10200] loop5: detected capacity change from 0 to 2048 [ 612.639818][T10200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 612.657552][T10201] loop2: detected capacity change from 0 to 2048 [ 612.696725][T10201] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 612.831658][T10201] syz.2.1441: attempt to access beyond end of device [ 612.831658][T10201] loop2: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 612.847018][T10206] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 612.950188][T10201] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 613.063378][T10201] Remounting filesystem read-only [ 613.070392][T10207] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 613.087871][ T5845] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 613.121902][T10201] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 613.226884][T10201] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 613.293134][T10207] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 613.389210][ T5845] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 613.399474][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.408465][ T5845] usb 7-1: Product: syz [ 613.412812][ T5845] usb 7-1: Manufacturer: syz [ 613.419892][ T5845] usb 7-1: SerialNumber: syz [ 613.524000][ T5845] usb 7-1: config 0 descriptor?? [ 613.857078][T10211] lo: entered allmulticast mode [ 613.883099][T10211] team0: entered promiscuous mode [ 613.888736][T10211] team_slave_0: entered promiscuous mode [ 613.895812][T10211] team_slave_1: entered promiscuous mode [ 613.958697][T10212] lo: entered promiscuous mode [ 613.997343][T10210] lo: left promiscuous mode [ 614.002872][T10210] team0: left promiscuous mode [ 614.008188][T10210] team_slave_0: left promiscuous mode [ 614.014501][T10210] team_slave_1: left promiscuous mode [ 614.020939][ T5845] usb 7-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (88) [ 614.024734][T10210] lo: left allmulticast mode [ 614.262602][ T5845] usb 7-1: no permanent extended address found, random address set [ 614.271294][ T5845] usb 7-1: atusb_probe: initialization failed, error = -524 [ 614.295995][ T5845] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 614.464607][ T5843] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 614.540433][ T5845] usb 7-1: USB disconnect, device number 7 [ 614.695771][ T5843] usb 3-1: Using ep0 maxpacket: 8 [ 614.732316][ T5843] usb 3-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 614.799210][ T5843] usb 3-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 614.812895][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 614.820147][ T5843] usb 3-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 614.829556][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.908677][ T5843] usb 3-1: config 0 descriptor?? [ 615.421411][ T5843] wacom 0003:056A:010E.0012: unbalanced collection at end of report description [ 615.510261][ T5843] wacom 0003:056A:010E.0012: parse failed [ 615.519586][ T5843] wacom 0003:056A:010E.0012: probe with driver wacom failed with error -22 [ 615.606197][ T5843] usb 3-1: USB disconnect, device number 17 [ 615.957432][T10225] IPVS: Scheduler module ip_vs_ not found [ 615.981719][T10228] IPVS: length: 24 != 12792 [ 617.675035][T10242] loop6: detected capacity change from 0 to 4096 [ 617.714965][T10242] EXT4-fs: Ignoring removed mblk_io_submit option [ 617.763277][T10242] EXT4-fs (loop6): Test dummy encryption mode enabled [ 617.828572][T10242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.865648][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 618.028149][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 618.045529][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 618.103447][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.114899][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.125841][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 618.135111][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.238989][ T9] usb 6-1: config 0 descriptor?? [ 618.246465][ T7345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.339950][ T9] hub 6-1:0.0: USB hub found [ 618.556292][ T9] hub 6-1:0.0: 1 port detected [ 619.215877][ T10] hub 6-1:0.0: activate --> -90 [ 619.640006][ T5843] usb 6-1: USB disconnect, device number 11 [ 619.646248][ T9] usb 6-1-port1: config error [ 620.077217][T10266] loop0: detected capacity change from 0 to 512 [ 620.109494][T10266] EXT4-fs: Ignoring removed bh option [ 620.274015][T10266] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 620.283598][T10266] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 620.382826][T10266] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 620.434901][T10266] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 620.524886][T10266] System zones: 0-2, 18-18, 34-35 [ 620.534381][T10266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.001127][T10276] Invalid ELF header magic: != ELF [ 621.019341][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.369694][T10274] loop5: detected capacity change from 0 to 4096 [ 621.530387][T10281] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 621.593244][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 622.506727][T10290] tipc: Started in network mode [ 622.511937][T10290] tipc: Node identity 6e46f2d19b9, cluster identity 4711 [ 622.521331][T10290] tipc: Enabled bearer , priority 0 [ 622.580489][T10292] tipc: Disabling bearer [ 624.996499][T10324] loop6: detected capacity change from 0 to 1024 [ 625.147550][T10324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 625.256160][T10324] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.379979][T10324] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.1491: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.677235][ T7345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 625.796184][T10336] loop3: detected capacity change from 0 to 1024 [ 625.908704][T10336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 626.017869][T10336] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.076578][T10338] loop5: detected capacity change from 0 to 2048 [ 626.135382][T10336] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1494: bg 0: block 112: padding at end of block bitmap is not set [ 626.146251][T10338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 626.213825][T10336] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 626.226815][T10336] EXT4-fs (loop3): This should not happen!! Data will be lost [ 626.226815][T10336] [ 626.295435][T10344] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1494: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.536681][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 626.779319][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.790181][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 626.827146][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 626.946580][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 626.957483][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 626.966648][ T10] usb 6-1: SerialNumber: syz [ 627.213311][ T10] usb 6-1: 0:2 : does not exist [ 627.387326][ T10] usb 6-1: USB disconnect, device number 12 [ 627.658983][ T6314] udevd[6314]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.686469][ T5843] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 627.754223][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 627.901405][ T5843] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 627.945885][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.959853][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.970455][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 628.119242][ T5843] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 628.129912][ T5843] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 628.139075][ T5843] usb 4-1: Manufacturer: syz [ 628.198014][ T5843] usb 4-1: config 0 descriptor?? [ 628.724145][ T5843] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 628.818189][ T5843] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 629.113002][T10371] loop6: detected capacity change from 0 to 8 [ 629.207758][T10371] unable to read id index table [ 629.326278][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1507'. [ 629.554097][ T10] usb 4-1: USB disconnect, device number 25 [ 629.770356][T10374] fido_id[10374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 630.014311][T10381] trusted_key: syz.0.1509 sent an empty control message without MSG_MORE. [ 630.846081][ T5843] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 631.045119][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 631.117415][ T5843] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 631.129527][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.138523][ T5843] usb 1-1: Product: syz [ 631.142892][ T5843] usb 1-1: Manufacturer: syz [ 631.147778][ T5843] usb 1-1: SerialNumber: syz [ 631.207434][ T5843] usb 1-1: config 0 descriptor?? [ 631.476099][ T5843] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 631.709595][T10394] ceph: No mds server is up or the cluster is laggy [ 632.312209][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 632.324632][ T5843] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 632.430083][ T5843] usb 1-1: USB disconnect, device number 12 [ 633.313688][T10425] loop5: detected capacity change from 0 to 128 [ 633.380514][T10425] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 633.425640][T10425] hpfs: filesystem error: improperly stopped [ 633.432048][T10425] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 633.440325][T10425] hpfs: You really don't want any checks? You are crazy... [ 633.504231][T10425] hpfs: hpfs_map_sector(): read error [ 633.511233][T10425] hpfs: code page support is disabled [ 633.559470][T10425] hpfs: hpfs_map_4sectors(): unaligned read [ 633.593592][T10425] hpfs: hpfs_map_4sectors(): unaligned read [ 633.605674][T10425] hpfs: filesystem error: unable to find root dir [ 633.751297][T10425] hpfs: hpfs_map_4sectors(): unaligned read [ 634.142119][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 635.460771][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1538'. [ 637.950721][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1550'. [ 639.235721][ T5843] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 639.416260][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 639.447322][ T5843] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.484515][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.517672][ T5843] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 639.556608][ T5843] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.565931][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.574183][ T5843] usb 1-1: Product: syz [ 639.578796][ T5843] usb 1-1: Manufacturer: syz [ 639.583570][ T5843] usb 1-1: SerialNumber: syz [ 640.180713][T10518] netlink: 'syz.6.1561': attribute type 10 has an invalid length. [ 640.313462][T10518] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 640.702602][ T5843] cdc_ncm 1-1:1.0: bind() failure [ 640.761545][ T5843] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 640.768898][ T5843] cdc_ncm 1-1:1.1: bind() failure [ 640.943813][ T5843] usb 1-1: USB disconnect, device number 13 [ 642.915730][ T5843] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 643.116690][ T5843] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 643.131324][ T5843] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 643.143483][ T5843] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 643.155765][ T5843] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 643.167309][ T5843] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 643.248808][ T5843] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 643.266361][ T5843] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 643.280193][ T5843] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 643.292354][ T5843] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 643.303932][ T5843] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 643.385893][ T5843] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 643.393622][ T5843] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 643.404942][ T5843] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 643.419013][ T5843] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 643.431086][ T5843] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 643.593259][ T5843] usb 7-1: string descriptor 0 read error: -22 [ 643.600544][ T5843] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 643.610151][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.747082][ T5843] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 645.251479][ T10] usb 7-1: USB disconnect, device number 8 [ 645.425804][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 645.631803][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 645.660006][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 645.668550][ T9] usb 6-1: config 0 has no interface number 0 [ 645.768555][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 645.778157][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.786828][ T9] usb 6-1: Product: syz [ 645.791173][ T9] usb 6-1: Manufacturer: syz [ 645.796110][ T9] usb 6-1: SerialNumber: syz [ 645.877439][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 645.886699][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 645.917365][ T9] usb 6-1: config 0 descriptor?? [ 645.951355][ T9] smsc95xx v2.0.0 [ 646.295663][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 646.478709][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 646.488455][ T5845] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 646.518934][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.530872][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.541209][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 646.550831][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.658208][ T10] usb 4-1: config 0 descriptor?? [ 646.695855][ T5845] usb 1-1: Using ep0 maxpacket: 8 [ 646.739117][ T5845] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 646.747751][ T5845] usb 1-1: config 0 has no interface number 0 [ 646.757457][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1592'. [ 646.772908][ T5845] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 646.784395][ T5845] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 646.798285][ T5845] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 646.810316][ T5845] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 646.822807][ T5845] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.836383][ T5845] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 646.845739][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.907829][ T5845] usb 1-1: config 0 descriptor?? [ 646.990100][ T5845] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 647.162847][ T10] apple 0003:05AC:0247.0014: unexpected long global item [ 647.211307][ T10] apple 0003:05AC:0247.0014: parse failed [ 647.218468][ T10] apple 0003:05AC:0247.0014: probe with driver apple failed with error -22 [ 647.279222][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 647.290704][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 647.322980][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 647.363512][ T5845] usb 4-1: USB disconnect, device number 26 [ 647.448323][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 647.618739][ T9] usb 6-1: USB disconnect, device number 13 [ 648.172731][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-1) [ 648.222319][ T9] usb 1-1: USB disconnect, device number 14 [ 648.273299][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 648.941198][T10600] loop3: detected capacity change from 0 to 2048 [ 653.555405][T10660] loop3: detected capacity change from 0 to 128 [ 653.583334][T10660] FAT-fs (loop3): bogus number of FAT sectors [ 653.589826][T10660] FAT-fs (loop3): Can't find a valid FAT filesystem [ 656.544299][T10679] loop8: detected capacity change from 0 to 8 [ 656.606535][T10679] Dev loop8: unable to read RDB block 8 [ 656.612665][T10679] loop8: unable to read partition table [ 656.667055][T10679] loop8: partition table beyond EOD, truncated [ 656.673637][T10679] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 657.489559][T10690] overlayfs: refusing to follow metacopy origin for (/file1) [ 660.165030][T10725] macvtap1: entered promiscuous mode [ 660.170866][T10725] macvtap1: entered allmulticast mode [ 660.193358][T10725] dummy0: entered promiscuous mode [ 660.199150][T10725] dummy0: entered allmulticast mode [ 660.228378][T10725] team0: Device macvtap1 failed to register rx_handler [ 660.237302][ T5845] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 660.257682][T10725] dummy0: left allmulticast mode [ 660.267818][T10725] dummy0: left promiscuous mode [ 660.428749][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 660.494469][ T5845] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 660.504134][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 660.515450][ T5845] usb 3-1: Product: syz [ 660.519807][ T5845] usb 3-1: SerialNumber: syz [ 660.578677][ T5845] usb 3-1: config 0 descriptor?? [ 660.638925][ T5845] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 660.657336][ T5845] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 660.684766][ T5845] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 660.692548][ T5845] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 660.931689][ T5845] usb 3-1: USB disconnect, device number 18 [ 661.272425][T10740] loop0: detected capacity change from 0 to 1024 [ 661.483773][ T30] audit: type=1800 audit(1770649516.464:94): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1652" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=0 res=0 errno=0 [ 661.885525][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 662.076758][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 662.107241][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 662.195570][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 662.204898][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.213476][ T9] usb 7-1: Product: syz [ 662.218052][ T9] usb 7-1: Manufacturer: syz [ 662.222828][ T9] usb 7-1: SerialNumber: syz [ 662.338150][ T9] usb 7-1: config 0 descriptor?? [ 662.417653][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 662.685740][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 662.895012][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 662.907585][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.921496][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 662.931195][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.325910][ T10] usb 1-1: usb_control_msg returned -32 [ 663.332023][ T10] usbtmc 1-1:16.0: can't read capabilities [ 663.445711][ T9] gspca_zc3xx: reg_w_i err -71 [ 663.721017][T10769] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 663.900417][ T10] usb 1-1: USB disconnect, device number 15 [ 664.057053][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 664.063857][ T9] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 664.126242][ T9] usb 7-1: USB disconnect, device number 9 [ 664.635001][T10780] tls_set_device_offload: netdev not found [ 664.776285][T10785] comedi comedi3: comedi_test: 3879 microvolt, 100000 microsecond waveform attached [ 664.896782][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.903712][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 664.988089][T10788] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 665.014243][T10788] overlayfs: failed to set xattr on upper [ 665.020514][T10788] overlayfs: ...falling back to redirect_dir=nofollow. [ 665.027880][T10788] overlayfs: ...falling back to uuid=null. [ 665.534993][T10793] netlink: 'syz.5.1671': attribute type 3 has an invalid length. [ 666.731724][T10814] tipc: Enabling of bearer rejected, failed to enable media [ 668.343992][T10841] loop5: detected capacity change from 0 to 1024 [ 668.366575][ T5845] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 668.441880][T10841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.483893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 668.597753][ T5845] usb 7-1: Using ep0 maxpacket: 8 [ 668.613379][T10841] EXT4-fs error (device loop5): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.5.1690: path /253/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 668.690203][ T5845] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 668.698781][ T5845] usb 7-1: config 0 has no interface number 0 [ 668.735792][ T5845] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 668.747833][ T5845] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 668.759894][ T5845] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 668.771507][ T5845] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 668.783323][ T5845] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 668.796733][ T5845] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 668.806474][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.946116][ T5845] usb 7-1: config 0 descriptor?? [ 669.031702][ T5845] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 669.153590][ T6984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.254843][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 669.307279][ T9] usb 7-1: USB disconnect, device number 10 [ 669.361189][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 669.786101][T10854] hsr_slave_1 (unregistering): left promiscuous mode [ 670.053408][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1698'. [ 670.296791][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1699'. [ 670.381979][T10861] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1699'. [ 671.747008][ T5845] kernel read not supported for file /input/event0 (pid: 5845 comm: kworker/1:4) [ 671.968420][T10887] netlink: 'syz.5.1710': attribute type 12 has an invalid length. [ 671.984241][T10887] netlink: 'syz.5.1710': attribute type 29 has an invalid length. [ 671.995323][T10887] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1710'. [ 672.005089][T10887] netlink: 'syz.5.1710': attribute type 2 has an invalid length. [ 672.014199][T10887] netlink: 'syz.5.1710': attribute type 2 has an invalid length. [ 672.859710][T10903] FAT-fs (loop11): unable to read boot sector [ 673.707036][T10917] loop6: detected capacity change from 0 to 512 [ 673.764673][T10917] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 673.911160][T10917] EXT4-fs (loop6): 1 orphan inode deleted [ 673.917520][T10917] EXT4-fs (loop6): 1 truncate cleaned up [ 673.960885][T10917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.072541][T10917] EXT4-fs (loop6): shut down requested (2) [ 674.342921][ T7345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.415533][ T5845] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 675.557707][T10936] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 675.610709][ T5845] usb 3-1: Using ep0 maxpacket: 8 [ 675.683590][ T5845] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 675.713522][ T5845] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 675.724997][ T5845] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 675.736452][ T5845] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 675.752372][ T5845] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.766393][ T5845] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 675.778743][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.205587][ T5845] usb 3-1: usb_control_msg returned -32 [ 676.213144][ T5845] usbtmc 3-1:16.0: can't read capabilities [ 676.953965][T10949] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 677.022224][T10947] loop5: detected capacity change from 0 to 4096 [ 677.150677][ T9] usb 3-1: USB disconnect, device number 19 [ 678.421674][T10966] loop2: detected capacity change from 0 to 128 [ 678.459658][T10966] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 678.534114][T10966] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 679.276869][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 679.338468][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 679.420735][T10974] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1743'. [ 679.430291][T10974] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1743'. [ 679.588701][ T5845] IPVS: starting estimator thread 0... [ 679.696799][T10983] IPVS: using max 192 ests per chain, 9600 per kthread [ 681.243321][T10995] loop0: detected capacity change from 0 to 4096 [ 683.094449][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 685.011156][T11045] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 685.091866][T11045] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 686.631557][ T5079] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 686.849218][T11074] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1782'. [ 687.429156][T11080] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1788'. [ 688.320219][T11089] loop5: detected capacity change from 0 to 512 [ 688.443038][T11089] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 688.574991][T11089] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1792: inode has both inline data and extents flags [ 688.625649][T11089] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1792: couldn't read orphan inode 15 (err -117) [ 688.696401][T11089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.840413][T11096] loop8: detected capacity change from 0 to 8 [ 688.875961][T11096] Dev loop8: unable to read RDB block 8 [ 688.882027][T11096] loop8: unable to read partition table [ 688.929305][T11096] loop8: partition table beyond EOD, truncated [ 688.936139][T11096] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 689.127406][ T6984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.426934][T11101] netlink: 'syz.6.1796': attribute type 1 has an invalid length. [ 689.767438][T11101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 690.002750][T11103] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 690.707605][ T9029] ===================================================== [ 690.716095][ T9029] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xe7b/0xc820 [ 690.725828][ T9029] n_tty_receive_buf_standard+0xe7b/0xc820 [ 690.732666][ T9029] n_tty_receive_buf_common+0x1a59/0x2610 [ 690.739162][ T9029] n_tty_receive_buf2+0x4c/0x60 [ 690.744198][ T9029] tty_ldisc_receive_buf+0xc6/0x2c0 [ 690.749774][ T9029] tty_port_default_receive_buf+0xd7/0x1a0 [ 690.757222][ T9029] flush_to_ldisc+0x43e/0xe40 [ 690.766120][ T9029] process_scheduled_works+0xae7/0x1d60 [ 690.771913][ T9029] worker_thread+0x1741/0x1de0 [ 690.777097][ T9029] kthread+0xd5a/0xf00 [ 690.781324][ T9029] ret_from_fork+0x207/0x6f0 [ 690.786243][ T9029] ret_from_fork_asm+0x1a/0x30 [ 690.791216][ T9029] [ 690.793644][ T9029] Uninit was stored to memory at: [ 690.799042][ T9029] n_tty_receive_buf_standard+0xe74/0xc820 [ 690.805057][ T9029] n_tty_receive_buf_common+0x1a59/0x2610 [ 690.811119][ T9029] n_tty_receive_buf2+0x4c/0x60 [ 690.817698][ T9029] tty_ldisc_receive_buf+0xc6/0x2c0 [ 690.823090][ T9029] tty_port_default_receive_buf+0xd7/0x1a0 [ 690.829209][ T9029] flush_to_ldisc+0x43e/0xe40 [ 690.834048][ T9029] process_scheduled_works+0xae7/0x1d60 [ 690.839980][ T9029] worker_thread+0x1741/0x1de0 [ 690.844925][ T9029] kthread+0xd5a/0xf00 [ 690.849278][ T9029] ret_from_fork+0x207/0x6f0 [ 690.855509][ T9029] ret_from_fork_asm+0x1a/0x30 [ 690.860520][ T9029] [ 690.862929][ T9029] Uninit was created at: [ 690.867532][ T9029] __kmalloc_noprof+0xae9/0x1bf0 [ 690.872609][ T9029] __tty_buffer_request_room+0x3d4/0x7a0 [ 690.878983][ T9029] __tty_insert_flip_string_flags+0x157/0x6e0 [ 690.885353][ T9029] uart_insert_char+0x368/0x930 [ 690.890357][ T9029] serial8250_read_char+0x1ba/0x670 [ 690.896518][ T9029] serial8250_handle_irq+0x930/0x1110 [ 690.902070][ T9029] serial8250_default_handle_irq+0x116/0x370 [ 690.908408][ T9029] serial8250_interrupt+0xcb/0x420 [ 690.913726][ T9029] __handle_irq_event_percpu+0x118/0xed0 [ 690.919636][ T9029] handle_irq_event+0xe0/0x2a0 [ 690.924572][ T9029] handle_edge_irq+0x2a9/0xb30 [ 690.929667][ T9029] __common_interrupt+0x9d/0x180 [ 690.934781][ T9029] common_interrupt+0x94/0xb0 [ 690.939757][ T9029] asm_common_interrupt+0x2b/0x40 [ 690.944925][ T9029] [ 690.947431][ T9029] CPU: 0 UID: 0 PID: 9029 Comm: kworker/u8:10 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 690.960337][ T9029] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 690.966022][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 690.976447][ T9029] Workqueue: events_unbound flush_to_ldisc [ 690.982460][ T9029] ===================================================== [ 690.989668][ T9029] Disabling lock debugging due to kernel taint [ 690.996205][ T9029] Kernel panic - not syncing: kmsan.panic set ... [ 691.002764][ T9029] CPU: 0 UID: 0 PID: 9029 Comm: kworker/u8:10 Tainted: G B W L syzkaller #0 PREEMPT(voluntary) [ 691.014537][ T9029] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 691.021062][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 691.031259][ T9029] Workqueue: events_unbound flush_to_ldisc [ 691.037320][ T9029] Call Trace: [ 691.040698][ T9029] [ 691.043728][ T9029] __dump_stack+0x26/0x30 [ 691.048241][ T9029] dump_stack_lvl+0x50/0x1c0 [ 691.053015][ T9029] ? dump_stack+0x12/0x25 [ 691.057541][ T9029] dump_stack+0x1e/0x25 [ 691.061892][ T9029] vpanic+0x435/0xd40 [ 691.066096][ T9029] panic+0x15d/0x160 [ 691.070227][ T9029] kmsan_report+0x31a/0x320 [ 691.074958][ T9029] ? ktime_get_mono_fast_ns+0x54b/0x590 [ 691.080733][ T9029] ? __msan_warning+0x1b/0x30 [ 691.085600][ T9029] ? n_tty_receive_buf_standard+0xe7b/0xc820 [ 691.091834][ T9029] ? n_tty_receive_buf_common+0x1a59/0x2610 [ 691.097979][ T9029] ? n_tty_receive_buf2+0x4c/0x60 [ 691.103216][ T9029] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 691.108810][ T9029] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 691.115017][ T9029] ? flush_to_ldisc+0x43e/0xe40 [ 691.120044][ T9029] ? process_scheduled_works+0xae7/0x1d60 [ 691.125984][ T9029] ? worker_thread+0x1741/0x1de0 [ 691.131110][ T9029] ? kthread+0xd5a/0xf00 [ 691.135514][ T9029] ? ret_from_fork+0x207/0x6f0 [ 691.140531][ T9029] ? ret_from_fork_asm+0x1a/0x30 [ 691.145661][ T9029] ? ret_from_fork_asm+0x1a/0x30 [ 691.150793][ T9029] ? __update_load_avg_cfs_rq+0xe6/0x1000 [ 691.156674][ T9029] ? kmsan_get_metadata+0xf1/0x160 [ 691.162046][ T9029] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 691.168096][ T9029] ? kmsan_get_metadata+0xf1/0x160 [ 691.173414][ T9029] ? kmsan_get_metadata+0xf1/0x160 [ 691.178735][ T9029] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 691.185289][ T9029] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 691.191599][ T9029] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 691.197614][ T9029] ? __wake_up+0x29d/0x2f0 [ 691.202274][ T9029] ? kmsan_get_metadata+0xf1/0x160 [ 691.207670][ T9029] __msan_warning+0x1b/0x30 [ 691.212383][ T9029] n_tty_receive_buf_standard+0xe7b/0xc820 [ 691.218471][ T9029] ? kmsan_get_metadata+0xf1/0x160 [ 691.223790][ T9029] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 691.229834][ T9029] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 691.235890][ T9029] ? kmsan_get_metadata+0xf1/0x160 [ 691.241263][ T9029] ? advisor_target_scan_time_store+0x100/0x180 [ 691.247807][ T9029] n_tty_receive_buf_common+0x1a59/0x2610 [ 691.253809][ T9029] ? finish_task_switch+0x141/0x8b0 [ 691.259309][ T9029] n_tty_receive_buf2+0x4c/0x60 [ 691.264399][ T9029] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 691.270164][ T9029] tty_ldisc_receive_buf+0xc6/0x2c0 [ 691.275566][ T9029] tty_port_default_receive_buf+0xd7/0x1a0 [ 691.281603][ T9029] flush_to_ldisc+0x43e/0xe40 [ 691.286497][ T9029] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 691.293092][ T9029] ? __pfx_flush_to_ldisc+0x10/0x10 [ 691.298451][ T9029] process_scheduled_works+0xae7/0x1d60 [ 691.304236][ T9029] worker_thread+0x1741/0x1de0 [ 691.309218][ T9029] kthread+0xd5a/0xf00 [ 691.313422][ T9029] ? __pfx_worker_thread+0x10/0x10 [ 691.318719][ T9029] ? __pfx_kthread+0x10/0x10 [ 691.323461][ T9029] ret_from_fork+0x207/0x6f0 [ 691.328231][ T9029] ? __switch_to+0x521/0x750 [ 691.332995][ T9029] ? __pfx_kthread+0x10/0x10 [ 691.337735][ T9029] ret_from_fork_asm+0x1a/0x30 [ 691.342729][ T9029] [ 691.346470][ T9029] Kernel Offset: disabled [ 691.350861][ T9029] Rebooting in 86400 seconds..